CVE-2019-12874
An issue was discovered in zlib_decompress_extra in modules/demux/mkv/ ...
Kaynağa göre önem derecesi
Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: NVD. Daha düşük diyenler: Ubuntu (orta).
Açıklama
An issue was discovered in zlib_decompress_extra in modules/demux/mkv/util.cpp in VideoLAN VLC media player 3.x through 3.0.7. The Matroska demuxer, while parsing a malformed MKV file type, has a double free.
Etkilenen paketler ve düzeltilmiş sürümler
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| debian 11 | vlc | 3.0.7-1 |
| debian 12 | vlc | 3.0.7-1 |
| debian 13 | vlc | 3.0.7-1 |
| debian 14 | vlc | 3.0.7-1 |
| debian 8 | vlc | düzeltme belirtilmemiş |
| debian 9 | vlc | 3.0.7-0+deb9u1 |
| echo | vlc | 3.0.7-1 |
| ubuntu 18.04 | vlc | 3.0.7.1-0ubuntu18.04.1 |
| ubuntu 18.04-ESM | vlc | 3.0.7.1-0ubuntu18.04.1 |
| ubuntu 19.04 | vlc | 3.0.7.1-0ubuntu19.04.1 |
Referanslar
- http://git.videolan.org/?p=vlc.git%3Ba=commit%3Bh=81023659c7de5ac2637b4a879195efef50846102
- http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00005.html
- http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00037.html
- http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00040.html
- http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00081.html
- http://www.securityfocus.com/bid/108882
- https://security.gentoo.org/glsa/201908-23
- https://ubuntu.com/security/notices/USN-4074-1